95aad485fb
Fix issue #412
2021-01-21 05:28:56 -05:00
719f18ac78
Fix cmedb encoding error #439
2021-01-21 05:08:06 -05:00
908d074815
Catch exception if domain controller not found --kdcHost
2021-01-21 03:54:26 -05:00
af2dc05b7e
Add --continue-on-success option to ldap protocol
2021-01-21 03:47:45 -05:00
7210bc1eae
Add better error management for --shares
2020-12-09 17:12:58 -05:00
b0aa66a074
Fix encode error on spider option #430
2020-11-27 18:46:41 -05:00
cc7573155f
Fix pass policy max password age #435
2020-11-27 15:51:09 -05:00
cb5c8855ed
Version 5.1.3 🔥
...
- Replaced Gevent with AsyncIO
- Shares are now logged in the database and can be queried
- You can now press enter while a scan is being performed and CME will
give you a completion percentage and the number of hosts remaining to
scan
2020-11-15 16:42:28 -07:00
50bebac056
Fix mssql enum host info error
2020-10-01 22:46:13 +08:00
7dde1a13f6
Update mssql check_if_admin
2020-10-01 16:12:16 +08:00
6885d9fd30
Add local-auth flag for MSSQL proto
2020-09-06 15:38:29 -04:00
bd549d0e6f
Fix false positive on ckec_if_admin func MSSQL
2020-09-06 10:09:44 -04:00
74ddbe7545
Fix check_if_admin() function for mssql
2020-09-06 09:30:03 -04:00
e47b110603
Improve MSSQL login
2020-09-06 09:21:38 -04:00
8785f5d3f4
option --ntds doesn't require to be admin anymore check #408
2020-08-12 17:27:53 +02:00
ce8094045d
Add more compatibility for windows exe
...
- decrease winrm timeout to 3 seconds so @IppSec 's videos
tlast less time :)
-- add ico to cme exe
-- add option smb-server-port to make cme compatible with windows
2020-07-30 15:14:31 +02:00
1aa2f8cc0f
Fix winrm uninitialized variable and hash auth option
2020-07-28 10:16:06 -04:00
d80c4bf39c
Fix some logic error using option asreproast #398
2020-06-30 16:49:11 -04:00
2fd9ac50e4
Add ntlm hash auth with ldap protocol
2020-06-22 06:25:32 -04:00
4120883f6d
Add hash auth with winrm protocol
2020-06-22 06:25:00 -04:00
56f1f9dd93
Login return False only if NT_STATUS_LOGON_FAILURE
2020-06-21 15:21:07 -04:00
280d497b0d
Add conditional check on the func login()
...
- modules, options will no longer be loaded if authentication fails
- add some try catch and fix some problem with the debug on the passpolicy class
2020-06-20 18:16:37 -04:00
8f2ef3fdaf
Add color when smb status is not ACCESS_DENIED #391
2020-06-20 13:20:27 -04:00
648d756701
Improve os import for ldap protocol
2020-06-20 06:30:25 -04:00
c590230f97
Clean authentication fail message on winrm protocol when ntlm error
2020-06-20 06:26:32 -04:00
b8c505c234
Improve output of protocol winrm
2020-06-20 06:20:53 -04:00
046056d273
Add option --continue-on-success to smb protocol
2020-06-20 06:10:05 -04:00
5b6d66950f
Fix ssh authentication error and update option for unconstrainte delegation to --trusted-for-delegation
2020-06-20 05:56:55 -04:00
957820e339
Fix ldap protocol os import
2020-06-19 17:57:09 -04:00
ad4f06918b
Refactor the ldap module and add option --admin-count and --trusted-for-auth
2020-06-19 17:31:34 -04:00
e5d1942251
Add kerberoasting and asrepoast attack with LDAP protocol
2020-06-19 09:20:22 -04:00
4a19d4dc32
feat(ssh): Add support for publickey authentication.
2020-05-21 09:03:12 -04:00
8931ec2300
Add Windows spec file to compile CME for Windows
2020-05-10 20:06:08 +02:00
b796000343
Fix issue #321 option --continue-on-success
2020-05-09 09:36:31 -04:00
3e1fa0f258
Fix local-auth authentication
2020-05-09 08:20:53 -04:00
d3a7effb86
Fix ssh issue #375
2020-05-09 07:59:53 -04:00
b778306cc1
Always print FQDN
2020-05-05 12:13:32 -04:00
3b57fb0869
Add checkifadmin() for Kerberos auth #22
2020-05-05 12:11:18 -04:00
1820cc1ffb
Show FQDN instead of domain name
2020-05-04 15:30:56 -04:00
622245dcfa
Add support kerberos aesKey and kdcHost #22 add lssasy module kerberos support
...
add error when not credential foud on lsassy module #368
2020-05-04 13:23:41 -04:00
1308bc30c8
Adding Kerberos support for CME #22
...
TODO
- aeskey
- dc-ip
- checkifadmin()
2020-05-03 14:30:41 -04:00
c3c9b2f04a
Remove useless code #364
2020-05-01 17:31:54 -04:00
580018050c
Add better logic to MSSQL connection #364
2020-05-01 17:18:25 -04:00
c5be1e5234
Add exception handler when login fails on MSSQL protocol #364
2020-05-01 17:11:54 -04:00
bfe1d5b7c3
Fix uninitialized variable #363
2020-05-01 14:33:18 -04:00
062e312fd5
Add try catch for issue #363
2020-05-01 14:20:55 -04:00
4dc4892660
Check if output is byte before decoding
2020-04-30 13:56:34 -04:00
74792ce712
Add option --no-bruteforce allowing credentials spraying without bruteforce
...
cme accept user file and password file and works like this:
user1 -> pass1
-> pass2
user2 -> pass1
-> pass2
Option --no-bruteforce works like this
user1 -> pass1
user2 -> pass2
2020-04-30 10:06:57 -04:00
78c5d9ebd9
Update WINRM authentication option
...
If you want to avoind SMB connection use the flag -d DOMAIN
2020-04-29 06:28:47 -04:00
479ae1f721
Update MSSQL protocol for windows authentication #306
...
If you want to use windows auth for MSSQL without SMB, add the flag -d DOMAIN
2020-04-29 05:56:11 -04:00
mpgn
byt3bl33d3r
Dliv3
Alexandre Beaulieu